The state of LibreSSL in FreeBSD (opens in new tab)

Gentoo ~x86/~amd64 also supports LibreSSL with the "libressl" USE flag. Makes for a great hardened (Grsecurity/PaX) install for servers/chromebooks.

OS X also ships LibreSSL (ssh -v).

I've got a lot of love for OpenBSD but I can understand people wanting to use FreeBSD for things like ZFS and dtrace. However for those seeking to use said features personally I would recommend looking at an illumos distro.

FreeBSD and OpenBSD are ideologically opposed. FreeBSD is free as in freedom, OpenBSD is free as in beer.

... "says De Raadt"

Maybe there is a group of people out there that don't want to deal with that ... guy.

There also BoringSSL[1] but that might be even more of a departure than LibreSSL in terms of API compatibility. I still think it's surprising that we don't see more BoringSSL being used especially with nginx.

[1] https://boringssl.googlesource.com/boringssl/

This really depends on what your production environment requires. LibreSSL is mostly API compatible with OpenSSL but removes FIPS and support for esoteric platforms. If your production environment requires Windows 3.1 or big endian amd64 then probably LibreSSL is not ready for your production environment. Seriously though some of us are already using LibreSSL in production without problems.

This really is a more complex question then it may seem. One of the reasons I haven't yet upgraded my production system is because I want to be able to keep my system up-to-date. Now, having to manually patch the FreeBSD source tree once a new upgrade lands is a bit of a pain. The point of the article is really about exploring where we are and where the FreeBSD community is headed.

It's not in the base system yet. I would be fine with using it in production, however.